CVE-2026-80945

Received Received - Intake

Linux Kernel Crypto IAA Decompress DMA Corruption

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics error, decompress retries through the software fallback, which writes req->dst with the CPU while it is still mapped DMA_FROM_DEVICE. With SWIOTLB active the later dma_unmap_sg() copies the stale bounce buffer over req->dst, corrupting the result. Unmap before the fallback runs. The async path unmaps inline; the sync path signals the retry with -EAGAIN so iaa_comp_adecompress() runs the fallback after unmapping.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-80945

EUVD

EUVD-2026-76268

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the crypto subsystem, specifically in the IAA (Intel QuickAssist Technology) decompression handling. When a hardware error occurs during decompression, the system attempts to retry using a software fallback. However, this can lead to a race condition where the destination buffer is still mapped for DMA (Direct Memory Access) while the CPU writes to it, causing data corruption. The fix ensures the buffer is unmapped before the software fallback runs.

Detection Guidance

This vulnerability is specific to the Linux kernel's crypto subsystem, particularly the IAA (Intel Analytics Accelerator) decompress functionality. Detection requires checking kernel logs for hardware analytics errors or decompress failures. Monitor dmesg or journalctl for errors related to crypto operations or DMA mapping issues.

Impact Analysis

This vulnerability could lead to incorrect decompression results, potentially causing data corruption or system instability. If exploited, it might result in application crashes, incorrect data processing, or security issues depending on how the affected crypto operations are used in your system.

Mitigation Strategies

Apply the kernel patch that resolves this issue. Update to a kernel version containing the fix for crypto: iaa - unmap dst before software fallback on decompress. If immediate patching is not possible, disable the IAA hardware acceleration for crypto operations as a temporary workaround.

Hi! I’m here to help you understand CVE-2026-80945. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70